Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-4428
5.4
MEDIUMCVSS v3
Published
July 12, 2016
CVSS v2
3.5 LOW
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.
openstack/horizon
GitHubOpenStack Dashboard (Horizon). Mirror of code maintained at opendev.org.
GitHubOpenStack Dashboard (Horizon). Mirror of code maintained at opendev.org.= 9.0.0, = 9.0.1, >= 8.0.0, <= 8.0.1, < 8.0.2, >= 9.0.0, < 9.1.0NVD